Another one: you guys are using a DV certificate, which is really less than ideal for an app like this, that needs to be trusted by its users.